Skip to content

OpnForm

v2.0.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

form form-builder laravel marketing-tools nuxt saas

Affected surfaces

auth

Summary

AI summary

Hardened editable submission links by moving legacy submissions to UUID IDs and rejecting old predictable identifiers.

Full changelog

Small update with PDF template improvements, self-hosted licensing fixes, and submission handling polish.

What's changed

  • Create PDF templates from scratch with form fields rendered into a ready-to-edit layout. The PDF editor also opens with a better fit-to-width zoom, snap guides for alignment, clearer static text previews, and a more compact zone list.
  • Added a public self-hosted Enterprise license checkout and improved AppSumo lifetime workspace entitlement handling, including a dry-run backfill command for affected workspaces.
  • Hardened editable submission links by moving legacy submissions to UUID public IDs and rejecting old predictable identifiers.
  • Improved embedded form SDK messaging and iframe bridge reliability.
  • Fixed partial submission validation, summary date/rating calculations, stale matrix rows, long form title truncation, and comparison/pricing page polish.

Upgrade notes

  • This release includes new database migrations. Run the normal migration flow before using the new build.
  • If you are affected by the AppSumo workspace entitlement issue, run the new backfill command after deploy.
  • Old Hashid-based edit links for legacy submissions are intentionally invalidated; UUID-based links remain valid.

Full diff: https://github.com/OpnForm/OpnForm/compare/v2.0.1...b8f27f58a5893ff4eee3c4c2a24f0af77da0159f

Breaking Changes

  • Old Hashid-based edit links for legacy submissions are intentionally invalidated.

Security Fixes

  • Editable submission links hardened by moving legacy submissions to UUID public IDs and rejecting old predictable identifiers (prevents enumeration/abuse).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpnForm

Get notified when new releases ship.

Sign up free

About OpnForm

Beautiful Open-Source Form Builder

All releases →

Related context

Earlier breaking changes

  • v2.0.0 Requires running new database migrations before using V2 features.

Beta — feedback welcome: [email protected]